forked from extern/shorewall_code
Convert macro.AllowICMPs to a standard action
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9037 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
dc2e7a9922
commit
4c409b4586
@ -49,6 +49,14 @@ Other changes in 4.3.3
|
||||
'start' processing. If the kernel version is less than 2.6.25, a
|
||||
fatal error is generated.
|
||||
|
||||
5) The AllowICMPs macro has been converted to a standard action. This
|
||||
allows for more efficient processing in the case where ipv6-icmp is
|
||||
specified as the PROTO in the invocation of AllowICMPs.
|
||||
|
||||
e.g.,
|
||||
|
||||
AllowICMPs $FW net ipv6-icmp
|
||||
|
||||
Migration Issues.
|
||||
|
||||
None.
|
||||
|
@ -1,14 +1,13 @@
|
||||
#
|
||||
# Shorewall6 version 4 - AllowICMPs Macro
|
||||
# Shorewall6 version 4 - AllowICMPs Action
|
||||
#
|
||||
# /usr/share/shorewall6/macro.AllowICMPs
|
||||
# /usr/share/shorewall6/action.AllowICMPs
|
||||
#
|
||||
# This macro ACCEPTs needed ICMP types
|
||||
# This action ACCEPTs needed ICMP types
|
||||
#
|
||||
###############################################################################
|
||||
#ACTION SOURCE DEST PROTO DEST SOURCE RATE USER/
|
||||
# PORT(S) PORT(S) LIMIT GROUP
|
||||
|
||||
#TARGET SOURCE DEST PROTO DEST
|
||||
# PORT(S)
|
||||
COMMENT Needed ICMP types (RFC4890)
|
||||
|
||||
ACCEPT - - ipv6-icmp destination-unreachable
|
@ -19,6 +19,7 @@
|
||||
#
|
||||
###############################################################################
|
||||
#ACTION
|
||||
AllowICMPs # Accept needed ICMP6 types
|
||||
Drop # Default Action for DROP policy
|
||||
Reject # Default Action for REJECT policy
|
||||
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
|
||||
|
@ -104,6 +104,7 @@ fi
|
||||
|
||||
%attr(0644,root,root) /usr/share/shorewall6/version
|
||||
%attr(0644,root,root) /usr/share/shorewall6/actions.std
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.AllowICMPs
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.Drop
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.Reject
|
||||
%attr(0644,root,root) /usr/share/shorewall6/action.template
|
||||
|
Loading…
Reference in New Issue
Block a user